WHAT IS CLAIMED IS: 

1. A system for monitoring packets transmitted on a channel connecting an 
application server and a user of said application server to each other, comprising: 

5 (a) a certification server which certificates a user; and 

(b) a first device which, on receipt of a request firom said certification server, 
monitors packets transmitted on said channel. 

2. The system as set forth in claim 1, wherein said certification server 
10 includes: 

(al) a first memory which stores a user management table including ID 
numbers of users, passwords by which users are identified, a monitoring 
parameter designating a packet to be monitored, and a threshold parameter 
designating a method of monitoring said packet; and 
15 (a2) a second device which transmits a request to said first device to start or 

finish monitoring said packet at a timing when said user logs-in or logs-out 
his/her terminal. ' 

3. The system as set forth in claim 2, wherein said first device includes: 

20 (bl) a second memory which stores a first time at which a packet transmitted 

from one of said application server and said user arrives, when said first device 
receives a request from said second device to monitor said packet; 

(b2) an analyzer which monitors a second time at which packets coincident 
with said monitoring parameter arrive, based on said first time, when said first 
25 device receives a request from said second device to monitor said packet, and 
determines whether there is any rule in an interval in said second time; and 

(b3) an annunciator which makes annunciation to said user when there is a 
certain rule in said interval. 
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4. The system as set forth in claim 2, wherein said certification server 
includes a third device which updates said monitoring parameter and said 
threshold parameter, when instructed by said user. 

5 5. The system as set forth in claim 2, wherein said first device include: 

(bl) a third memory which stores said monitoring parameter transmitted 
from said second device; 

(b2) a fourth memory which stores said threshold parameter transmitted 
from said second device; and 
10 (b3) a fourth device which said third and fourth memories when said second 

device transmits a request to said first device to start or finish monitoring said 
packet. 

6. The system as set forth in claim 3, wherein said first device include: 

15 (bl) a third memory which stores said monitoring parameter transmitted 

from said second device; 

(b2) a fourth memory which stores said threshold parameter transmitted 
from said second device; and 

(b3) a fourth device which said third and fourth memories when said second 
20 device transmits a request to said first device to start or finish monitoring said 
packet. 

7. The system as set forth in claim 6, wherein said analyzer analyzes 
whether there is any rule in said interval and whether said interval exceeds said 

25 threshold parameter, and said annunciator makes annunciation to said user when 
said analyzer judges that there is a certain rule in said interval and that said 
interval exceeds said threshold parameter. 

8. A method of monitoring packets transmitted on a channel connecting an 
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application server and a user of said application server to each other, comprising 
the steps of: 

(a) acquiring a monitoring parameter indicative of a packet to be monitored, 
when said user logs-in his/her terminal; 
5 (b) monitoring a time at which packets coincident with said monitoring 

parameter arrive, and determining whether there is any rule in an interval in 
said arrival time; and 

(c) making annunciation to said user when there is a certain rule in said 
interval. 

0 

9. The method as set forth in claim 8, further comprising the step of ceasing 
said step (b) when said user logs-out his/her terminal. 



10. The method as set forth in claim 8, wherein said monitoring parameter is 
15 included in a user management table which further includes an ID number of said 

user, a password by which said user is identified, and a threshold parameter 
designating a method of monitoring said packet, and 
said step (a) includes the steps of: 

(al) retrieving said user management table, based on said ID number and 
20 said password both input by said user; 

(a2) acquiring said monitoring parameter, if said monitoring parameter is 
stored in said user management table; and 

(a3) acquiring said threshold parameter, if said threshold parameter is 
stored in said user management table. 

25 

11. The method as set forth in claim 10, wherein said step (b) includes the 
step of analyzing whether there is a certain rule in said interval and whether said 
interval exceeds said threshold parameter, after acquiring said threshold 
parameter in said step (a2), and said step (c) includes the step of making 
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annunciation to said user, if there is .a certain rule in said interval and said 
interval exceeds said threshold parameter. 

12. A recording medium readable by a computer, storing a program therein 
5 for causing a computer to act as a system for monitoring packets transmitted on a 

channel connecting an application server and a user of said application server to 
each other, 

said system comprising: 

(a) a certification server which certificates a user; and 
10 (b) a first device which, on receipt of a request from said certification server, 

monitors packets transmitted on said channel. 

13. The recording medium as set forth in claim 12, wherein said certification 
server includes: 

15 (al) a first memory which stores a user management table including ID 

numbers of users, passwords by which users are identified, a monitoring 
parameter designating a packet to be monitored, and a threshold parameter 
designating a method of monitoring said packet; and 

(a2) a second device which transmits a request to said first device to start or 

20 finish monitoring said packet at a timing when said user logs-in or logs-out 
his/her terminal. 

14. The recording medium as set forth in claim 13, wherein said first device 
includes: 

25 (bl) a second memory which stores a first time at which a packet transmitted 

from one of said application server and said user arrives, when said first device 
receives a request from said second device to monitor said packet; 

(b2) an analyzer which monitors a second time at which packets coincident 
with said monitoring parameter arrive, based on said first time, when said first 
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device receives a request from said second device to monitor said packet, and 
determines whether there is any rule in an interval in said second time; and 

(b3) an annunciator which makes annunciation to said user when there is a 
certain rule in said interval. 

5 

15. The recording medium as set forth in claim 13, wherein said certification 
server includes a third device which updates said monitoring parameter and said 
threshold parameter, when instructed by said user. 

10 16. The recording medium as set forth in claim 13, wherein said first device 

include: 

(bl) a third memory which stores said monitoring parameter transmitted 
from said second device; 

(b2) a fourth memory which stores said threshold parameter transmitted 
15 from said second device; and 

(b3) a fourth device which said third and fourth memories when said second 
device transmits a request to said first device to start or finish monitoring said 
packet. 

20 17. The recording medium as set forth in claim 14, wherein said first device 

include: 

(bl) a third memory which stores said monitoring parameter transmitted 
from said second device; 

(b2) a fourth memory which stores said threshold parameter transmitted 
25 from said second device; and 

(b3) a fourth device which said third and fourth memories when said second 
device transmits a request to said first device to start or finish monitoring said 
packet. 
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18. The recording medium as set. forth ,in claim 17, wherein said analyzer 
analyzes whether there is any rule in said interval and whether said interval 
exceeds said threshold parameter, and said annunciator makes annunciation to 
said user when said analyzer judges that there is a certain rule in said interval 

5 and that said interval exceeds said threshold parameter. 

19. A recording medium readable by a computer, storing a program therein 
for causing a computer to carry out a method of monitoring packets transmitted 
on a channel connecting an application server and a user of said application 

10 server to each other, said method comprising the steps of: 

(a) acquiring a monitoring parameter indicative of a packet to be monitored, 
when said user logs-in his/her terminal; 

(b) monitoring a time at which packets coincident with said monitoring 
parameter arrive, and determining whether there is any rule in an interval in 

15 said arrival time; and 

(c) making annunciation to said user when there is a certain rule in said 
interval. 

20. The recording medium as set forth in claim 19, wherein said method 
20 further includes the step of ceasing said step (b) when said user logs-out his/her 

terminal. 

21. The recording medium as set forth in claim 19, wherein said monitoring 
parameter is included in a user management table which further includes an ID 

25 number of said user, a password by which said user is identified, and a threshold 
parameter designating a method of monitoring said packet, and 
said step (a) includes the steps of: 

(al) retrieving said user management table, based on said ID number and 
said password both input by said user; 
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• # # 

(a2) acquiring said monitoring parameter, if said monitoring parameter is 
stored in said user management table; and 

(a3) acquiring said threshold parameter, if said threshold parameter is 
stored in said user management table. 

5 

22. The recording medium as set forth in claim 21, wherein said step (b) 
includes the step of analyzing whether there is a certain rule in said interval and 
whether said interval exceeds said threshold parameter, after acquiring said 
threshold parameter in said step (a2), and said step (c) includes the step of 
10 making annunciation to said user, if there is a certain rule in said interval and 
said interval exceeds said threshold parameter. 
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